498 matches found
The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to execute arbitrary code.
The vulnerability of the Core component of the Oracle VM VirtualBox software is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2024-32206
A stored cross-site scripting XSS vulnerability in the component \affiche\admin\index.php of WUZHICMS v4.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $formdata parameter...
The vulnerability of the /index.php?page=search component of the web application used to manage assets in RackTables allows a attacker to disclose sensitive information.
The vulnerability of the /index.php?page=search component of the web application used to manage RackTable assets exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to disclose sensitive informatio...
PT-2024-22586 · Mitel · Mitel Inattend +1
Name of the Vulnerable Software and Affected Versions: Mitel InAttend versions 2.6 SP4 through 2.7 Mitel CMG versions 8.5 SP4 through 8.6 Description: A vulnerability in the BluStar component could allow access to sensitive information, changes to the system configuration, or execution of arbitra...
Cross site request forgery (csrf)
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articledescriptionmain.php...
CVE-2024-28432
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/articleedit.php...
Cross site request forgery (csrf)
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/mediaadd.php...
Cross site request forgery (csrf)
DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via the component /dede/catalogedit.php...
BIT-MYSQL-CLIENT-2022-27381
An issue in the component Field::setdefault of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...
SEMCMS Security Breach
SEMCMS is a multilingual content management system CMS for foreign trade websites. A security vulnerability exists in SEMCMS v.4.8, which originates from an SQL injection vulnerability. The vulnerability can be exploited to execute arbitrary code and obtain sensitive information via the...
Privilege escalation
An arbitrary file upload vulnerability in the component /sysFile/upload of Novel-Plus v4.3.0-RC1 allows attackers to execute arbitrary code via uploading a crafted file...
The vulnerability of the twisted.web network framework’s component, which allows a hacker to compromise the integrity of the protected information.
The vulnerability of the twisted.web network framework’s component is related to inconsistent interpretation of HTTP requests. Exploiting this vulnerability allows a remote attacker to compromise the integrity of protected information through multiple HTTP requests...
The vulnerability of the Contacts component in SAP Marketing’s CRM system allows a hacker to carry out a phishing attack.
The vulnerability of the Contacts component in SAP Marketing CRM systems is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to carry out a phishing attack and disclose sensitive information using a specially created malicious lin...
CVE-2024-24291
An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL...
CVE-2024-24291
An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL...
Cross site scripting
WhatACart v2.0.7 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /site/default/search...
CVE-2024-22550
An arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of ShopSite v14.0 allows attackers to execute arbitrary code via uploading a crafted SVG file...
GLSA-202401-27 : Ruby: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202401-27 Ruby: Multiple vulnerabilities - An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked the transfer-encoding header...
CVE-2024-0252
ManageEngine ADSelfService Plus versions 6401 and below are vulnerable to the remote code execution due to the improper handling in the load balancer component. Authentication is required in order to exploit this vulnerability...